---
name: Threat Model Generation
slug: threat-model-generation
category: AI Engineering
description: Threat Model Generation creates a STRIDE-based threat model and security config for the current repository using Bug Hunter artifacts. Use it when a project lacks a threat model, its architecture changes, or a security review needs updated trust-boundary context.
github: "https://github.com/codexstar69/bug-hunter/tree/main/skills/threat-model-generation"
language: JavaScript
stars: 491
forks: 60
install: "npx degit https://github.com/codexstar69/bug-hunter/tree/main/skills/threat-model-generation ~/.claude/skills/threat-model-generation"
installs_to: ~/.claude/skills/threat-model-generation
source_path: skills/threat-model-generation/SKILL.md
collection_size: 11
category_size: 2451
collection_url: "https://dirskills.com/collections/codexstar69/bug-hunter"
added: 2026-08-26T05:13:11.136Z
last_synced: 2026-08-26T05:13:11.136Z
canonical_url: "https://dirskills.com/skills/threat-model-generation"
---

# Threat Model Generation

Threat Model Generation creates a STRIDE-based threat model and security config for the current repository using Bug Hunter artifacts. Use it when a project lacks a threat model, its architecture changes, or a security review needs updated trust-boundary context.

**Install:**

```bash
npx degit https://github.com/codexstar69/bug-hunter/tree/main/skills/threat-model-generation ~/.claude/skills/threat-model-generation
```

## README

# Threat Model Generation

This is a bundled local Bug Hunter companion skill. It generates portable threat-model artifacts under `.bug-hunter/`.

## Purpose

Create the security context that the other security skills depend on:
- trust boundaries
- major components
- STRIDE threats
- vulnerability pattern library
- severity/config defaults

## Required outputs

Write:
- `.bug-hunter/threat-model.md`
- `.bug-hunter/security-config.json`

## Workflow

1. Read `.bug-hunter/triage.json` if available for file structure and domain hints.
2. Inspect the repository to identify:
   - languages and frameworks
   - public/authenticated/internal entry points
   - data stores and external integrations
   - sensitive assets and trust boundaries
3. Generate a concise STRIDE threat model.
4. Generate a matching security config with thresholds and tech-stack metadata.

## Compatibility

`prompts/threat-model.md` is generated from this skill for older clients. This
skill is the canonical source and must be edited instead of the generated
compatibility prompt.

## Output rules

- Keep the threat model short enough for downstream agents to consume.
- Be specific about trust boundaries and vulnerable code patterns.
- Keep all artifacts under `.bug-hunter/`, never `.factory/`.